
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3019fb95-4007-3b9d-aba0-4cb7c785cf8a.roa
File: 3019fb95-4007-3b9d-aba0-4cb7c785cf8a.roa (raw, json)
Hash identifier: TzCmrobpQNet9yFyPgKk5iECvAJWgfS8BXHah+woz3A=
Subject key identifier: 8F:A0:82:52:73:4C:52:05:0D:FD:9C:35:0A:D6:18:AD:EA:85:25:BB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA93287A14A76B246389AEB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3019fb95-4007-3b9d-aba0-4cb7c785cf8a.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.70.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:87:a1:4a:76:b2:46:38:9a:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=9ee0d676-3d64-476b-a24c-0c183fd4dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:5e:7a:bb:6c:fd:cf:b3:a9:30:96:22:6a:
9e:23:62:da:04:dc:76:e3:82:6c:90:b3:60:21:7b:
a2:5e:0b:25:36:f4:6a:6d:90:53:b2:01:b5:01:b1:
9d:93:62:54:46:6a:06:25:fe:b4:48:ba:cd:87:69:
26:34:29:18:e4:53:9c:1f:73:34:c9:7d:c3:5e:c8:
d0:77:38:5c:ff:4d:eb:2c:8a:88:88:be:e5:76:50:
15:31:6f:0a:53:0c:0f:2d:8e:49:01:27:8b:2f:0c:
3a:9f:7c:10:4c:4c:f7:cf:ef:de:a3:ac:7b:9c:b1:
da:9c:1a:01:4e:9f:d1:1a:47:56:c5:7a:c6:d9:e6:
47:19:1b:78:a3:e8:62:4f:8a:76:7b:94:93:9f:53:
9d:8c:47:2f:65:d0:63:e9:f9:88:20:69:36:92:cd:
c9:32:fb:25:8c:37:e7:df:e0:f7:52:f0:a7:74:17:
95:be:ff:9a:79:86:a2:70:79:17:76:6c:e5:5d:38:
e7:8f:22:7f:f7:40:8f:55:e5:15:d7:07:dc:e7:c3:
65:98:dd:3b:8e:a6:a5:7e:82:53:99:d9:2d:22:ba:
34:61:77:47:21:52:60:93:1f:d9:e6:b0:dc:6b:ee:
e1:2f:15:c5:8a:60:e9:29:f4:a3:b3:a2:ef:31:e1:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:82:52:73:4C:52:05:0D:FD:9C:35:0A:D6:18:AD:EA:85:25:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3019fb95-4007-3b9d-aba0-4cb7c785cf8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:c3:fd:04:e7:da:ad:58:54:8a:d3:dc:8a:d0:d1:c2:44:0f:
61:5c:56:ad:ba:57:4f:12:c7:a3:b8:1c:4f:0c:38:47:cd:a3:
b5:18:c5:7e:7d:8e:01:31:26:bf:6c:e8:21:0d:1f:ac:b6:a5:
9b:80:31:ec:6b:b5:fd:96:7a:ec:d7:4c:20:4c:04:a5:3b:98:
08:ea:10:a3:6d:46:a7:9e:88:ef:3d:77:4f:db:32:be:63:14:
f1:ee:c7:8b:a4:92:f1:39:25:81:68:9f:cc:64:be:e6:fd:80:
6a:5c:9d:3b:ee:97:1f:4d:4c:0b:ab:e6:2c:2d:b3:50:04:13:
02:29:7c:ee:47:0e:26:4b:9a:92:6b:e3:95:ad:1f:71:1a:a3:
20:15:5f:63:c7:18:1f:f1:2a:1b:f5:94:a1:f3:5f:38:18:28:
5d:58:7b:2c:4e:41:d1:9a:e8:d7:f8:be:ed:bf:23:17:5b:36:
07:f2:f9:36:5c:fd:c5:e0:95:41:e5:b1:b5:a8:5a:dc:94:24:
e0:8e:3a:9d:b8:63:51:f4:82:a9:87:b4:c5:89:5e:4f:08:67:
7e:4e:ff:bc:96:91:cf:c4:b4:eb:4c:d3:a7:78:90:dd:68:a0:
a5:0e:79:95:7e:0d:f5:73:2a:b3:6f:44:a1:1d:be:a6:cd:6c:
61:02:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:24:02 2025 by rpki-client